[bug #60211] error: verification requested but nobody cares

[INVALID.NOREPLY]

Follow-up Comment #3, bug #60211 (project grub):

[comment #0 original submission:]
> I have detailed the steps on how to reproduce this issue:
> https://md.archlinux.org/F1JuYj5xQtWyhvH8_ilErg

Having the same problem when trying to use only my own keys (following the
arch-wiki guide without shim as I don't want any other keys than mine). 

Adding the tpm module to the core-image via --modules="tpm" on grub-install
enabled me to get into grub without said error. 

When selecting my signed kernel to boot I got an error stating "shim_lock
protocol not found". 

After once again running grub-install, this time with both --modules="tpm" and
--disable-shim-lock I was able to successfully boot with enabled Secure Boot.

Still not really sure why tpm changes something in the first place and how to
properly do it without shim. 

___

Reply to this item at:

  

___
  Message sent via Savannah
  https://savannah.gnu.org/

[bug #60211] error: verification requested but nobody cares

[Giancarlo Razzolini]

Follow-up Comment #2, bug #60211 (project grub):

[comment #1 comentário #1:]
> I see the same happening on Gentoo with 2.06-rc1

Yes, we also updated to 2.06rc1 on Arch, but the behavior is the same. This
bug is the main reason we have been holding the package on Arch, because we
know there might be several users out there rolling their own Secure Boot keys
with GRUB.

___

Reply to this item at:

  

___
  Mensagem enviada pelo Savannah
  https://savannah.gnu.org/

[bug #60211] error: verification requested but nobody cares

[Andrius Štikonas]

Follow-up Comment #1, bug #60211 (project grub):

I see the same happening on Gentoo with 2.06-rc1

___

Reply to this item at:

  

___
  Message sent via Savannah
  https://savannah.gnu.org/

[bug #60211] error: verification requested but nobody cares

[Giancarlo Razzolini]

URL:
  

 Summary: error: verification requested but nobody cares
 Project: GNU GRUB
Submitted by: grazzolini
Submitted on: Qui 11 Mar 2021 10:14:52 UTC
Category: Booting
Severity: Major
Priority: 5 - Normal
  Item Group: Software Error
  Status: None
 Privacy: Public
 Assigned to: None
 Originator Name: 
Originator Email: 
 Open/Closed: Open
 Release: 
 Release: other
 Discussion Lock: Any
 Reproducibility: Every Time
 Planned Release: None

___

Details:

When using your own Secure Boot keys (not MS keys) and grub
2:2.04.r358.g39cfb3eb5-2 on Arch Linux, booting will fail with the following
error:

error: verification requested but nobody cares: (cryptouuid//grub/x86_64-efi/normal.mod).

I have detailed the steps on how to reproduce this issue:

https://md.archlinux.org/F1JuYj5xQtWyhvH8_ilErg

It is also worth mentioning that using shim to load grub doesn't change
anything.  




___

Reply to this item at:

  

___
  Mensagem enviada pelo Savannah
  https://savannah.gnu.org/